SWE210 Software Security Week 1

Obtain information that is being transmitted

Release of Message Contents (Eg: Telephone Conversation)

Determine the location and identity of communicating hosts, observe the frequency and length of messages being exchanged

<p>Modification of the data stream or creation of a false data stream</p> Signup and view all the answers

<p>Masquerade (one entity pretends to be a different entity)</p> Signup and view all the answers

<p>Some portion of a legitimate message is altered, or messages are delayed or reordered to produce an unauthorized effect</p> Signup and view all the answers

<p>Protection of systems, data, and resources against unauthorized access, disclosure, alteration, or destruction.</p> Signup and view all the answers

<p>Personal information of approximately 147 million individuals was compromised, including names, Social Security numbers, birth dates, and addresses.</p> Signup and view all the answers

<p>The breach stemmed from a vulnerability in Apache Struts, a web application framework used by Equifax.</p> Signup and view all the answers

<p>Attackers compromised SolarWinds' software updates, leading to unauthorized access across organizations.</p> Signup and view all the answers

<p>Equifax faced financial and reputational damage, including lawsuits, regulatory investigations, and Congressional hearings.</p> Signup and view all the answers

<p>Organizations rushed to patch affected systems and mitigate risks.</p> Signup and view all the answers

<p>Vulnerability in Facebook's 'View As' feature</p> Signup and view all the answers

<p>Phone numbers, emails, and personal information</p> Signup and view all the answers

<p>Acknowledged the breach, addressed the vulnerability, and notified affected users to review privacy settings</p> Signup and view all the answers

<p>Confidentiality, Integrity, Availability</p> Signup and view all the answers

<p>Attacks that make use of information from the system without affecting system resources.</p> Signup and view all the answers

<p>It ensures confidentiality, integrity, and availability of data and systems.</p> Signup and view all the answers

<p>To assure that messages are received as sent with no duplication, insertion, modification, reordering, or replays.</p> Signup and view all the answers

<p>Connectionless integrity service generally provides protection against message modification only.</p> Signup and view all the answers

<p>Protection against denial by one of the entities involved in a communication of having participated in all or part of the communication.</p> Signup and view all the answers

<p>Proof that the message was sent by the specified party.</p> Signup and view all the answers

<p>It transforms data into a form that is not readily intelligible, using mathematical algorithms.</p> Signup and view all the answers

<p>To prove the source of data and the integrity of data.</p> Signup and view all the answers

<p>Risk is the likelihood and potential impact of a threat exploiting a vulnerability to cause harm to an asset.</p> Signup and view all the answers

<p>Risk of Data Breach: Unauthorized access to sensitive customer information.</p> Signup and view all the answers

<p>An attack is an intentional or malicious act aimed at exploiting vulnerabilities and compromising the security of an asset or system.</p> Signup and view all the answers

<p>Phishing Attack: Deceptive emails or messages designed to trick users into revealing sensitive information.</p> Signup and view all the answers

<p>Mitigation refers to the process of reducing the likelihood or impact of potential threats by addressing vulnerabilities and implementing security controls.</p> Signup and view all the answers

<p>Installing Antivirus Software: Protecting systems from malware and other malicious software.</p> Signup and view all the answers